CVE-2020-36608lowCWE-707

CVE-2020-36608: falha de baixa gravidade em Tribal Systems Zenario CMS

Tribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scripting

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Zenario CMS+ Monitorar tribalsystems/zenario

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.5epss 0.5%
A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file admin_organizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is dfd0afacb26c3682a847bea7b49ea440b63f3baa. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-212816.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
Tribal Systems · Zenario CMS
CVEs relacionadas — Tribal Systems Zenario CMS

No mesmo produto, das mais perigosas para as menos.

CVE-2022-4231MEDIUMTribal Systems Zenario CMS Remember Me session fixiationEPSS 0.5%